636bdda38cf1dc5e4f50bed8e375d1d3e676b0651b24c32ce6dbea324596a8d5 | Triage

Sharing

General

Target

636bdda38cf1dc5e4f50bed8e375d1d3e676b0651b24c32ce6dbea324596a8d5
Size

227KB
Sample

240811-1qkdaszenn
MD5

fcc5a0916ea1f81ea835dbc094483ad7
SHA1

687bd5031a24fa264b5c0959aad1e64d7374cb2a
SHA256

636bdda38cf1dc5e4f50bed8e375d1d3e676b0651b24c32ce6dbea324596a8d5
SHA512

a30c0a4cc77fbd31865a237c4cca8eee9c03963d475fd0449bb57b8c308c9603411079f58b4b6f6a5c36c312e1a7b4d0384a1b32ec5c9bb9c9be492c70e8f12a
SSDEEP

3072:DXVbQnD5oEre/6HX8gqSBwceyVpwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFO:7V0nDaEP3GPrm7U5j2QE2+g24Id2jFHu

Score

10^/10

discovery persistence

Malware Config

Targets

- Target
  
  636bdda38cf1dc5e4f50bed8e375d1d3e676b0651b24c32ce6dbea324596a8d5
- Size
  
  227KB
- MD5
  
  fcc5a0916ea1f81ea835dbc094483ad7
- SHA1
  
  687bd5031a24fa264b5c0959aad1e64d7374cb2a
- SHA256
  
  636bdda38cf1dc5e4f50bed8e375d1d3e676b0651b24c32ce6dbea324596a8d5
- SHA512
  
  a30c0a4cc77fbd31865a237c4cca8eee9c03963d475fd0449bb57b8c308c9603411079f58b4b6f6a5c36c312e1a7b4d0384a1b32ec5c9bb9c9be492c70e8f12a
- SSDEEP
  
  3072:DXVbQnD5oEre/6HX8gqSBwceyVpwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFO:7V0nDaEP3GPrm7U5j2QE2+g24Id2jFHu
Score

10^/10

discovery persistence
- Adds autorun key to be loaded by Explorer.exe on startup
  persistence
- Executes dropped EXE
- Loads dropped DLL
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Privilege Escalation

Boot or Logon Autostart Execution

Registry Run Keys / Startup Folder

Defense Evasion

Modify Registry

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2

discoverypersistence